|
I pushed a group of saved searches to a newly built v4.1.4 indexer from a v4.1.4 deployment head. The .bundle files end up in the /opt/splunk/var/run/[servername] directory on the target indexer and seem to be running fine on their 2-minute schedules. The problem I have is when I go to Manager --> Searches and Reports, and click on the "Run" link located to the far right of the saved searches. When clicking that link, I get the 500 Internal Server Error TypeError: 'NoneType' object is unsubscriptable message. Scoured Splunk.com for any info on what app.conf changes can be made, but came up with nothing. |
|
There's no "debugging info" link. Below is the contents of everything on the screen at the time of the error. #500 Internal Server Error TypeError: 'NoneType' object is unsubscriptable This page was linked to from https://splunkserver3.webum.net/en-US/manager/search/saved/searches. You are using splunkserver3.webum.net, which is connected to splunkd @82143 at https://127.0.0.1:8089 on Mon Nov 29 08:38:36 2010. |
There should be a 'debugging info' link or something on that 500 page. Or failing that a stack trace which should show up in the web_service log in index=_internal. Can you paste in the info from either of those?